Lsass exe reboots

If the Answer is helpful, please click "Accept Answer" and upvote it. Another thing we can try is to replace your verifier.

If it still does not help, you might need to collect procmon logs using Process Monitor for further troubleshooting. Maybe you guide me using procmon application with my issues?

Please kindly read below articles about how to use procmon. As forum service does not support procmon logs analysis, we suggest thay you could contact Microsoft Customer Support and Services where more in-depth investigation can be done so that you would get a more satisfying explanation and solution to this issue.

I opened premium case with Microsoft Services 4 day ago but not yet received feedback or solution :. Do you mean you haven't received any response from support engineer after you raised the ticket? If so, you could Microsoft Customer Support and Services to explain the situation as well as escalate it. This article describes an issue in which Windows Server R2-based domain controllers restart unexpectedly.

A hotfix is available to resolve this issue. Before you install this hotfix, check out the Prerequisites section. Important Do not install a language pack after you install this hotfix. If you do, the language-specific changes in the hotfix will not be applied, and you will have to reinstall the hotfix. For more information, see Add language packs to Windows. A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article.

Apply this hotfix only to systems that are experiencing this specific problem. If the hotfix is available for download, there is a "Hotfix Download Available" section at the top of this Knowledge Base article.

If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix. Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. Verify your account to enable IT peers to see that you are a professional.

JoeyBing This person is a verified professional. I don't have KB installed. Lose , reported problematic. Probably the non-R2 parallel to Probably the non-R2 parallel to Thanks. However, you may need to run shutdown -a again to prevent the computer from automatically restarting again. If you're unable to open any of Microsoft's pages, Windows update pages, or antivirus protection pages, likely the Sasser worm has modified your lmhosts hosts file.

Follow the steps below to edit and verify this file has not been modified. What is the Windows lsass. Note If you need to reboot the computer because of updates that were installed on your computer, it's ok to reboot the computer.